Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/K1eHjLxEzZTDkzgtdgdjbTval_Y.roa
File: K1eHjLxEzZTDkzgtdgdjbTval_Y.roa (raw, json)
Hash identifier: 6MHOm+AzzrFDfFZBF82VsjDTX745bg2nNPWPLq3mOFg=
Subject key identifier: 2B:57:87:8C:BC:44:CD:94:C3:93:38:2D:76:07:63:6D:3B:DA:97:F6
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 019F942A6A7916C67563F3639D2E0B0EECF5
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/K1eHjLxEzZTDkzgtdgdjbTval_Y.roa
Signing time: Fri 24 Jul 2026 12:47:15 +0000
ROA not before: Fri 24 Jul 2026 12:47:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 18229
IP address blocks: 213.218.224.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 21:07:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:2a:6a:79:16:c6:75:63:f3:63:9d:2e:0b:0e:ec:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Jul 24 12:47:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2b57878cbc44cd94c393382d7607636d3bda97f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:a6:4c:2e:6c:82:6e:84:9a:b0:dd:73:1b:f2:
13:5a:b5:99:4f:52:4d:13:66:76:e6:d9:ce:28:1b:
31:ab:ee:80:ea:37:0c:95:8a:3f:ce:ac:3f:60:a2:
1b:3a:da:92:d5:4f:a9:ea:9a:eb:53:3f:1b:16:23:
3e:53:75:ea:4a:f7:11:2e:65:6c:ab:8c:1f:72:3e:
e5:9a:1a:f8:54:a9:4c:82:59:d2:e9:b6:98:42:5e:
4b:68:83:5b:53:73:bf:67:ec:38:fe:7e:7f:b3:ab:
5d:fe:e7:88:e5:fa:bc:88:95:0e:0c:aa:53:47:85:
b5:fa:46:8f:35:72:53:1a:92:0a:ed:54:62:c1:51:
aa:34:7b:bb:8a:8d:aa:16:f7:cb:ba:87:3a:3a:4a:
2a:7f:3b:67:94:f8:e3:ab:aa:b4:6f:79:c5:5e:1c:
f2:09:91:a1:50:2f:de:21:f1:67:95:bc:4b:9f:7f:
11:4a:ef:33:66:f1:d9:b8:29:d2:58:65:6c:ad:85:
d0:c3:19:9b:5e:c4:43:a6:84:1f:64:ed:b5:67:28:
ba:17:36:64:f7:e3:a7:be:24:fd:44:21:f1:61:fd:
e2:d4:29:99:91:98:a4:30:a0:10:df:e9:33:84:57:
6a:eb:9e:4f:08:91:7b:d3:f5:36:7a:e4:a6:5b:3c:
86:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:57:87:8C:BC:44:CD:94:C3:93:38:2D:76:07:63:6D:3B:DA:97:F6
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/K1eHjLxEzZTDkzgtdgdjbTval_Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.218.224.0/24
Signature Algorithm: sha256WithRSAEncryption
35:e7:72:74:41:09:cc:df:05:23:97:51:49:31:c4:3f:dd:e6:
5c:9c:1a:9e:1e:8b:da:f9:bf:0d:de:78:72:29:73:3b:a0:04:
87:c1:ad:79:6e:33:8e:52:8f:6b:2d:81:8e:af:35:77:26:9d:
4c:3a:ca:cb:f1:62:04:1f:e7:42:b5:1b:00:53:90:17:17:69:
d2:ce:ee:c0:35:11:98:60:b5:db:14:9d:01:3a:37:68:a7:35:
23:54:f5:e5:80:6c:d6:af:81:a1:60:47:a9:04:23:f1:b1:38:
f6:fe:17:cc:38:8c:09:33:f9:19:6e:82:5c:64:8e:6b:79:12:
41:67:57:fd:a1:ed:a9:0e:c0:bc:f1:ad:ae:a4:86:de:fe:e6:
4d:ee:07:80:2c:b0:27:ef:59:b0:56:92:dd:4a:df:82:53:f4:
98:a8:9b:d7:1f:58:45:db:ad:69:f9:60:e1:4d:87:e7:f2:9e:
06:f0:a6:09:87:fc:35:0b:42:05:b8:8b:30:57:0b:14:87:93:
51:bb:a4:f8:78:60:5a:74:52:1f:a2:32:b5:c7:52:60:d6:fe:
90:48:94:cb:b1:d7:63:af:64:3c:45:e8:79:cb:13:59:81:56:
9f:33:7d:94:b9:3f:da:58:3b:27:5f:e9:ac:c2:86:b5:f1:e6:
a9:31:4b:9d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ+UKmp5FsZ1Y/NjnS4LDuz1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlNWI4YTJiMTA2ZDMzNGIwYzZjNjFlMTc3YWE2MmY0NGZl
MGUzYjYwHhcNMjYwNzI0MTI0NzE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYjU3ODc4Y2JjNDRjZDk0YzM5MzM4MmQ3NjA3NjM2ZDNiZGE5N2Y2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlKZMLmyCboSasN1zG/ITWrWZT1JN
E2Z25tnOKBsxq+6A6jcMlYo/zqw/YKIbOtqS1U+p6prrUz8bFiM+U3XqSvcRLmVs
q4wfcj7lmhr4VKlMglnS6baYQl5LaINbU3O/Z+w4/n5/s6td/ueI5fq8iJUODKpT
R4W1+kaPNXJTGpIK7VRiwVGqNHu7io2qFvfLuoc6OkoqfztnlPjjq6q0b3nFXhzy
CZGhUC/eIfFnlbxLn38RSu8zZvHZuCnSWGVsrYXQwxmbXsRDpoQfZO21Zyi6FzZk
9+OnviT9RCHxYf3i1CmZkZikMKAQ3+kzhFdq655PCJF70/U2euSmWzyGIwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCtXh4y8RM2Uw5M4LXYHY2072pf2MB8GA1UdIwQY
MBaAFL5biisQbTNLDGxh4XeqYvRP4OO2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmx1S0t4QnRNMHNNYkdIaGQ2cGk5RV9nNDdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvSzFlSGpMeEV6WlREa3pndGRnZGpiVHZhbF9ZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvdmx1S0t4QnRNMHNNYkdIaGQ2cGk5RV9nNDdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1drgMA0G
CSqGSIb3DQEBCwUAA4IBAQA153J0QQnM3wUjl1FJMcQ/3eZcnBqeHova+b8N3nhy
KXM7oASHwa15bjOOUo9rLYGOrzV3Jp1MOsrL8WIEH+dCtRsAU5AXF2nSzu7ANRGY
YLXbFJ0BOjdopzUjVPXlgGzWr4GhYEepBCPxsTj2/hfMOIwJM/kZboJcZI5reRJB
Z1f9oe2pDsC88a2upIbe/uZN7geALLAn71mwVpLdSt+CU/SYqJvXH1hF261p+WDh
TYfn8p4G8KYJh/w1C0IFuIswVwsUh5NRu6T4eGBadFIfojK1x1Jg1v6QSJTLsddj
r2Q8Reh5yxNZgVafM32UuT/aWDsnX+mswoa18eapMUud
-----END CERTIFICATE-----
Generated at Tue Jul 28 02:21:59 2026 by rpki-client